jagdamba.org

Issued by R3

About this certificate

This digital certificate with serial number 04:79:99:db:de:cf:2c:28:0f:b9:77:dc:5f:ec:c8:46:d6:9a was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jagdamba.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:79:99:db:de:cf:2c:28:0f:b9:77:dc:5f:ec:c8:46:d6:9a
Serial Number (int): 389827823639950479344214113714974767896218
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b8:89:6d:2d:44:39:a5:c3:9e:bb:ff:15:44:01:e2:6a:02:1c:ca:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:c2:f8:af:c2:9c:73:72:7c:d0:97:52:84:30:cd:8e:20:12:e2:82
Fingerprint (sha256): 3f:d4:d5:c9:f8:e5:76:9c:59:5b:7b:c4:46:66:55:5e:20:10:c9:12:64:35:0a:34:aa:d6:21:b7:10:fc:c4:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jagdamba.org

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jagdamba.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantagebasketballclub.com
agentgoldusa.com
airusacharters.com
beliz.co
conservativevideographer.com
containerhomemanufacturer.com
denniels.com
himachalmatrimony.in
himcredit.com
hmhlogin.mvschools.net
homeomedicine.com
immigrationblogs.com
invigoring.com
jagdamba.org
ny.cosfacts.org
percussionexcerpts.com
plumbingingoldcoast.com
roofrejuvenationsarasota.com
sanantonioretirementguide.com
spontaneoushealing.com
store.opticalillusionstudios.com
tampafilmstudios.com
www.faithfullyeducatingamerica.com
xn--tablesant-j4a.com

Other certificates including the domain name jagdamba.org

(limited to 100 certificates)
impossible.ca
gemalings.ca
jagdamba.org
jagdamba.org
jagdamba.org
ssl-56d80.epik.to
divegear.online
jagdamba.org
jagdamba.org
jagdamba.org

Certificate

The complete raw certificate details for jagdamba.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNoy/g5AhUzAoNva7nUd
azBJJHsC3gD29TVpBB7vVsQM/ahXBc6ebumGNelVHO2Lg89pAvky3rFvTVNthO/R
jlZE16lbjoCeHpIG6rGT/ZfbDPpxnQCTP5JaknLuwjrqcfAPzcYWO2GlsSN/ukow
3RvbMU+SISzzCZNFjcmDLkeLE2C16PAUCga3Q5qEziAlxnPBWHOHhBnL1592EQPM
nx8aghndiJDIsMgUAiIeQNdgzsCBWCO1Z/7QkyAq8iqopJVAVcxpN4whUbQzoYIf
rJiJH3NWz26Kb9yVmxAz9fznK5od+LOtX4pfDYrYAuzvV2A9XE+KmDlwQRCPbuYs
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389827823639950479344214113714974767896218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 17:15:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 17:15:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jagdamba.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22830492924260351832190433879060701092918907254584182368320922896603773526818180890676093708416976180622645724699951746174647486594120133827184493576634190795279074400519771402042763195620566721718310850052779886290543614192814503817124487136779627544900051497759775751777682925063031891766371957875620136780210603853524116150659546916965037168228404720827974314900095661408505636866408838451808845275640691123553366650450781543858205769412936349150991857838211283729493692881373085648436324440090845042529466293793330982408926183110439981165985279389264661451822313451813891774735528534496379229376321866296900070569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8896d2d4439a5c39ebbff154401e26a021cca50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (554 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagebasketballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentgoldusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airusacharters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beliz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservativevideographer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'containerhomemanufacturer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denniels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'himachalmatrimony.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'himcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmhlogin.mvschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeomedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigrationblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invigoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagdamba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ny.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'percussionexcerpts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plumbingingoldcoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofrejuvenationsarasota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioretirementguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spontaneoushealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.opticalillusionstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampafilmstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithfullyeducatingamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tablesant-j4a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f20c504dd000004030046304402204fdd21a7f6461615d5471ac6ad8333dd28d0f54fae7404cfaf2043617b1e79e702201b70e3821e99d75b86afec1bc61a785814e8b779cb0bdd97f510e659d646cde60076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f20c504eb0000040300473045022100f29ef458a72d014605ece538d2ec6795b718d7e24eff886fcff8d31978084dd40220505dd00a15a28872b89ab3d1db485d8f8c8a6239a3fb98bd6085fa98a45a1a76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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